$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: u5eSPOXJDevYGGcZtK6d4nfBhEQPbZYPmUCBb1OuqCk= Subject key identifier: 8C:85:74:B9:74:AA:51:C5:C5:1D:2C:07:95:25:5C:52:14:0A:A1:DA Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 0CCE3F55F7A65764F4E34752A989547F2BEF0B7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 063E Signing time: Mon 08 Sep 2025 17:41:50 +0000 Manifest this update: Mon 08 Sep 2025 17:36:50 +0000 Manifest next update: Fri 12 Sep 2025 03:15:50 +0000 Files and hashes: 1: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: lXbYMKiewSXLVLG9BDpJiIeQL4j+OFMuvyInN8P2OK8=) 2: AS38482.roa (hash: mqOgj/4JaT7AGWmmy0w7CKSJj5WCQYyZUeVO9quFzao=) 3: AS45493.roa (hash: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=) 4: AS17451.roa (hash: FnF3obOz8I2ehTbrqQ2hP1HT7ruZt1siRzvNVsHKqk4=) 5: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ce:3f:55:f7:a6:57:64:f4:e3:47:52:a9:89:54:7f:2b:ef:0b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Sep 8 17:36:50 2025 GMT Not After : Sep 12 03:15:50 2025 GMT Subject: CN=8C8574B974AA51C5C51D2C0795255C52140AA1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:e0:f5:00:38:c9:d6:91:6c:e4:e2:af:55: 39:27:50:e4:32:bb:d6:2c:5a:d0:51:fc:28:72:4a: d0:7f:7f:0a:0d:13:40:99:d2:52:74:48:c4:e2:41: aa:6c:23:04:db:f5:bb:d0:58:e7:48:e4:e1:5d:46: 91:60:fc:dd:85:86:cb:db:54:eb:ba:26:da:5a:87: d7:a8:0f:44:d7:5e:ad:e9:6a:6d:0b:57:ae:2f:74: 50:36:d7:e8:e2:9b:68:89:4f:ed:be:71:e1:62:a2: e0:54:7c:ac:ae:a2:44:4d:46:c7:bc:4c:cc:41:31: e5:ec:25:eb:b8:93:f7:b0:27:57:86:1f:82:d0:01: ae:ab:cc:1d:96:de:4b:ff:d8:be:8e:0a:87:2a:53: bb:98:00:b0:f0:61:a3:5c:da:a1:e8:58:7d:4b:e9: ae:68:ad:53:c0:1f:42:31:24:26:b2:e6:6e:6f:ad: 8e:3c:59:1a:bd:79:27:4e:82:db:74:a5:54:d4:16: 92:f0:6e:2b:e9:e7:f6:b9:ec:12:97:64:77:a6:ec: bf:6c:eb:ac:fb:da:22:c7:4f:7c:32:e5:c3:eb:7f: e9:66:f5:bf:f2:d1:da:8d:61:38:ba:97:80:af:2a: aa:ef:34:27:cb:79:00:b8:a6:2d:ad:af:81:62:77: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:85:74:B9:74:AA:51:C5:C5:1D:2C:07:95:25:5C:52:14:0A:A1:DA X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:51:8f:b6:af:63:84:bc:bc:72:59:38:5c:02:2f:72:c3: 1e:7b:3b:33:d6:0f:90:ee:0e:7d:ad:e6:e6:0d:e8:7b:56:5d: 81:8c:81:42:90:63:11:dc:dc:2a:b5:1f:73:97:32:82:8d:6a: 5e:bd:10:36:3e:6f:69:f5:67:00:b7:69:8f:d2:1c:5e:1b:65: 0e:a0:78:fc:37:55:50:46:09:96:e9:09:43:05:2a:bd:4a:85: a9:0a:18:d2:ca:17:56:11:36:dd:4d:e8:82:88:4f:92:47:8b: f8:83:62:ee:3c:c7:eb:9c:63:c9:f5:64:a4:15:c4:b7:f2:92: c8:de:72:ce:34:f1:ec:d5:3a:14:ea:82:3d:f4:53:8d:0b:d4: c5:e2:b0:5a:fe:3c:2a:3b:3a:0f:4d:f0:e6:31:df:3e:93:6a: 6c:ae:db:68:cb:c9:49:e0:e4:fb:ca:a9:04:9e:26:4c:c3:f4: 4d:4d:93:7b:8c:8f:cb:f8:3a:b1:c0:e3:b6:35:80:1f:32:d0: f3:82:18:09:44:c2:05:de:cb:98:fc:b3:93:f4:2a:9a:c6:55: a3:da:7f:00:80:96:07:77:fa:0e:47:dc:cc:b1:95:7b:21:bd: 7c:97:13:f6:e4:3e:91:84:3f:7d:4f:6a:2e:39:b4:91:64:e2: 9d:c7:a1:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDM4/VfemV2T040dSqYlUfyvvC3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTA5MDgxNzM2NTBaFw0yNTA5MTIwMzE1NTBaMDMxMTAvBgNV BAMTKDhDODU3NEI5NzRBQTUxQzVDNTFEMkMwNzk1MjU1QzUyMTQwQUExREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3OD1ADjJ1pFs5OKvVTknUOQy u9YsWtBR/ChyStB/fwoNE0CZ0lJ0SMTiQapsIwTb9bvQWOdI5OFdRpFg/N2Fhsvb VOu6Jtpah9eoD0TXXq3pam0LV64vdFA21+jim2iJT+2+ceFiouBUfKyuokRNRse8 TMxBMeXsJeu4k/ewJ1eGH4LQAa6rzB2W3kv/2L6OCocqU7uYALDwYaNc2qHoWH1L 6a5orVPAH0IxJCay5m5vrY48WRq9eSdOgtt0pVTUFpLwbivp5/a57BKXZHem7L9s 66z72iLHT3wy5cPrf+lm9b/y0dqNYTi6l4CvKqrvNCfLeQC4pi2tr4Fid7ODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjIV0uXSqUcXFHSwHlSVcUhQKodowHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgxUY+2r2OEvLxyWThcAi9ywx57OzPWD5Du Dn2t5uYN6HtWXYGMgUKQYxHc3Cq1H3OXMoKNal69EDY+b2n1ZwC3aY/SHF4bZQ6g ePw3VVBGCZbpCUMFKr1KhakKGNLKF1YRNt1N6IKIT5JHi/iDYu48x+ucY8n1ZKQV xLfyksjecs408ezVOhTqgj30U40L1MXisFr+PCo7Og9N8OYx3z6Tamyu22jLyUng 5PvKqQSeJkzD9E1Nk3uMj8v4OrHA47Y1gB8y0POCGAlEwgXey5j8s5P0KprGVaPa fwCAlgd3+g5H3MyxlXshvXyXE/bkPpGEP31Pai45tJFk4p3Hodo= -----END CERTIFICATE-----Generated at Mon Sep 8 19:13:43 2025 by rpki-client